[Ace] Initial Working Group Draft of Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs)
Mike Jones <Michael.Jones@microsoft.com> Tue, 12 September 2017 18:01 UTC
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAAF1132026 for <ace@ietfa.amsl.com>; Tue, 12 Sep 2017 11:01:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.02
X-Spam-Level:
X-Spam-Status: No, score=-2.02 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mnMJiF38rRbt for <ace@ietfa.amsl.com>; Tue, 12 Sep 2017 11:01:38 -0700 (PDT)
Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0091.outbound.protection.outlook.com [104.47.36.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 54506126B6D for <ace@ietf.org>; Tue, 12 Sep 2017 11:01:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Z14Y3DOB4Zcl9mZ61H+dOGfYiVNlKXtpuRbpizBZ//4=; b=SI77VkYfvHxHSb9cv3eeD6LZkfSNVpj1HXvAjPhzPDvNALvsr3OCEGZKjN/uTbyplxsVJUvMXjEs+Wyb9gxYtpmUbtsG65e7XKRmTcmGTHS+I2QGU2WZAEgFDjv1QXzu3Vu2OXXFu7YFtfjGTql+HBUblo86d+Mlzco+7AVPFVc=
Received: from BN6PR21MB0500.namprd21.prod.outlook.com (10.172.112.10) by BN6PR21MB0497.namprd21.prod.outlook.com (10.172.112.7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.77.2; Tue, 12 Sep 2017 18:01:36 +0000
Received: from BN6PR21MB0500.namprd21.prod.outlook.com ([10.172.112.10]) by BN6PR21MB0500.namprd21.prod.outlook.com ([10.172.112.10]) with mapi id 15.20.0077.005; Tue, 12 Sep 2017 18:01:36 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: "ace@ietf.org" <ace@ietf.org>
Thread-Topic: Initial Working Group Draft of Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs)
Thread-Index: AdMr8ELEgka/W+pqS+OgpQpu3apX8w==
Date: Tue, 12 Sep 2017 18:01:36 +0000
Message-ID: <BN6PR21MB050058DF74A93394C0C0F661F5690@BN6PR21MB0500.namprd21.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Ref=https://api.informationprotection.azure.com/api/72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2017-09-12T11:01:35.1787798-07:00; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General
x-originating-ip: [2001:4898:80e8:6::36]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BN6PR21MB0497; 6:P+VFmWTJs9SJytgDrS1FKad376Jt+eTtiL4Q2AJiQ/Sda9OlL8VS/bfCVZtBIIHjC4ZNjPizTootwCyDY08o8Yv1v64VDRG00LovNvGRMYPPqba7BPYPwfQ7ciQ2TmXtjukhfTYqxGshc/LRU1JM5C88R5Iz7TyPUJKARja4egr10Qu3OXyoYiJUMw4QfktKfMXXHMB5al5JasUMppobF4lp+EEpz4Qrrk0T7mUyDsFRYHYdGdeWzcGQ+fSFbym31rfl3IwPv0jO0+KVDVTpmHLeAc5c/FwdXiAcYpZB/Si/kKRVUoDjdaJDUg3B3DnRUlUG3DrulZrPa6w/W07FQw==; 5:a8C1NQLzw8O5dQBKvyxgcsyYcmC+VkPWh6a/90Uy7g5OKq5dhK+WiORVOPVZXbwio2AC5X9fluxrRK6EvMcxaA9IImMRa+BIG8WV0W00Zcj1jHUJk3Si0NnDNyQV0XMgjbmHFQoy6W03VlO1ZoZANg==; 24:2pA5iFsd7HkOeqGMSiVjx8+VB56mFS3zxE1eVTKMkJjTy7c+iowGIi7kLToarTWImsmegCphexhYxiYHnRbHZN4MlZXZ7H/+NHyLeY+xP+I=; 7:t18bnTdH4jN5DdAj59+46GprIcaoZlqY/rSNmoQulu68qpun/d//mVOEshMLp3iK5dQpVVl/SBx183+E9FJUUHLuFL1+K+tVfXAkPWJOFiHSKCatTuEqKpBZsv8dBUyzAQsIJnbJ399QUqmagBbaXRoGHtqPOAxYFAXHesLhHivDgNWp2DeBiu5vhZwaFDMYSYPPN4dTRlOB6cxyKfpwEcMDZPmoxej48Ysl9sCjt5I=
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: 6037450a-2dfd-4e69-b785-08d4fa084f8b
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(48565401081)(300000503095)(300135400095)(2017052603199)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:BN6PR21MB0497;
x-ms-traffictypediagnostic: BN6PR21MB0497:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com;
x-exchange-antispam-report-test: UriScan:(31418570063057)(21748063052155);
x-microsoft-antispam-prvs: <BN6PR21MB049776E2A8DF4F17ED1CD716F5690@BN6PR21MB0497.namprd21.prod.outlook.com>
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(61425038)(6040450)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(100000703101)(100105400095)(6055026)(61426038)(61427038)(6041248)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(20161123564025)(20161123555025)(20161123560025)(20161123562025)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:BN6PR21MB0497; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:BN6PR21MB0497;
x-forefront-prvs: 042857DBB5
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(209900001)(47760400005)(189002)(199003)(51414003)(110136004)(68736007)(53376002)(2906002)(230783001)(9686003)(54896002)(6306002)(22452003)(55016002)(99286003)(236005)(5630700001)(74316002)(189998001)(53936002)(316002)(6916009)(97736004)(2501003)(7696004)(10090500001)(54356999)(77096006)(50986999)(6506006)(6436002)(5660300001)(5640700003)(606006)(2900100001)(10290500003)(966005)(33656002)(25786009)(101416001)(3280700002)(86362001)(106356001)(105586002)(2351001)(86612001)(8936002)(7736002)(102836003)(6116002)(72206003)(478600001)(790700001)(3660700001)(14454004)(8676002)(8990500004)(81156014)(81166006)(1730700003)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR21MB0497; H:BN6PR21MB0500.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_BN6PR21MB050058DF74A93394C0C0F661F5690BN6PR21MB0500namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Sep 2017 18:01:36.5830 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR21MB0497
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/UYqnVsn6u73UELUNbcTYrANT72E>
Subject: [Ace] Initial Working Group Draft of Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs)
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Sep 2017 18:01:41 -0000
The initial working group draft of the Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs) specification has been posted. It contains the same normative content as draft-jones-ace-cwt-proof-of-possession-01<https://tools.ietf.org/html/draft-jones-ace-cwt-proof-of-possession-01>. The abstract of the specification is: This specification describes how to declare in a CBOR Web Token (CWT) that the presenter of the CWT possesses a particular proof-of-possession key. Being able to prove possession of a key is also sometimes described as the presenter being a holder-of-key. This specification provides equivalent functionality to "Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)" (RFC 7800), but using CBOR and CWTs rather than JSON and JWTs. I look forward to working with my co-authors and the working group to hopefully complete this quickly! The specification is available at: * https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-00 An HTML-formatted version is also available at: * http://self-issued.info/docs/draft-ietf-ace-cwt-proof-of-possession-00.html -- Mike P.S. This notice was also posted at http://self-issued.info/?p=1735 and as @selfissued<https://twitter.com/selfissued>.